No email for me, yet I am still being forced to change my password (with the inability to enter my email address into their poorly designed form).

The Customer Service agent indicated it was a legitimate Marriott webpage and that they are requiring me to change my password (even though it is stronger than their "minimum" requirements). She was also not particularly customer service focused, as it took me three times to tell her that one of the four boxes on the change password page wouldn't accept any input (the email address field) before she understood that their IT people messed it up.

She's sending an email to me with a link to a Change Password page.